this post was submitted on 03 May 2026
14 points (88.9% liked)

Selfhosted

58921 readers
1431 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

I'm trying to make my first server (Immich + Navidrome + Nextcloud running on Debian, will use WireguardVPN for remote access), but my crappy XFinity router (XB7) just won't port forward at all to my server machine. I've tried so many things to make it work, so the best thing I can do now is buy my own router so that I can just use the Xfinity router as a bridge. Do you guys have recommendations for a secure, customizable enough, and long-distance router good for 6 people?

top 13 comments
sorted by: hot top controversial new old
[–] Telodzrum@lemmy.world 1 points 17 minutes ago

OpenWRT gets a lot of love around here, incorrectly.

If you are willing to flash custom software to a router you bought for that purpose, you may as well just pick the better option and put pfSense or (better) OPNsense on a mini PC with two Ethernet ports.

[–] utjebe@reddthat.com 6 points 1 hour ago (1 children)

You can get dirt cheap routers on eBay (like $30, for Tp-Link) that have active support on OpenWrt. Great little devices to get you started and if it won't be enough you will know more / what you need to upgrade.

However if your XB7 isn't doing / allowing port forwarding, you will still needed that for things to work.

[–] grue@lemmy.world 2 points 1 hour ago* (last edited 42 minutes ago)

I second the recommendation for TP-Link running OpenWRT (that's the important part).

I've been using a few Archer C7s for going on a decade at this point. (So long that they went from "OpenWRT" to "LEDE" to back to "OpenWRT", LOL!) They've been working fine that whole time, and the only thing that annoys me about them is that they're a funny shape instead of being rack-mountable.

[–] pulsewidth@lemmy.world 7 points 3 hours ago (1 children)

I use very popular router by Gl.Inet called Flint 2 (GL-MT6000). Goes on special for about $125 USD. Great specs, solid device.

Fully supported by OpenWRT, and I recommend flashing to that so that you have completely FOSS software with no possibly hijinks from the manufacturer's OEM OS.

You'll need to read some guides or watch some vids to get you set up on OpenWRT, bit of a learning curve, but it has everything you could possibly need. Check it out.

[–] Nawor3565@lemmy.blahaj.zone 4 points 3 hours ago

I also vouch for GL.inet routers, they also have a 5th gigabit port that was nice to have since all 4 of the ones on my old router were full.

[–] turbowafflz@lemmy.world 13 points 4 hours ago (2 children)

keep in mind it may not be your router's fault you can't accept incoming connections, you may be behind cgnat. if you are, you need a reverse proxy like cloudflare tunnels

[–] cravl@slrpnk.net 2 points 1 hour ago

Cloudflare tunnels is more than just a reverse proxy, but agreed. That might be the better option regardless. If you're Cloudflare-averse, you can use Tailscale funnels, or spin up your own rproxy+tunnel solution (there are plenty out there, such as Rathole, Zrok, or frp).

[–] ranslite@pie.dasneuland.de 1 points 3 hours ago

I am behind cgnat and my fritzbox buildin wireguard allows me to connect to my home network from outside.

[–] Shimitar@downonthestreet.eu 9 points 4 hours ago* (last edited 4 hours ago) (1 children)

Anything that supports OpenWRT I would say....

Or even better buy a mini PC with many net ports and install opnSense, but in this case you will need a separate wifi router and/or dedicated switch since any opnSense device will only work at perimeter level

[–] irmadlad@lemmy.world 1 points 2 hours ago

Or even better buy a mini PC with many net ports and install opnSense, but in this case you will need a separate wifi router and/or dedicated switch since any opnSense device will only work at perimeter level

I went with this option except using pFsense in lieu of OpnSense. My own modem, router, and managed switches.

[–] xep@discuss.online 6 points 3 hours ago (1 children)
[–] IsoKiero@sopuli.xyz 1 points 3 hours ago
[–] Eldritch@piefed.world 7 points 4 hours ago* (last edited 2 hours ago)

OpenWRT. It's got a slight learning curve. But if you want something guaranteed to do what you want while still being upgradable. It's the solution for you. You can find pre-made Hardware that will run it. Or any old business waste computers that you can gut and rebuild any way you like to make a beast of a router if you want.